No tracking
Only the cookies needed to log in and keep forms secure. No analytics or advertising cookies.
Simulator data only
The client sends your simulated aircraft's position – never your real-world location.
Deleted after a week
Flights and positions are removed automatically after one week.
Last updated: 1 November 2026
Your account
- Email address – identifies your account and is used to send one-time login codes. We do not use passwords.
- API key – used by the desktop client to upload your position. We only store a hashed (one-way encrypted) version of it.
- Plan – whether you have a free or supporter account, which decides how often the client may upload.
- Display name (optional) – shown on the map if you choose to set one.
Your email address is never shown publicly.
Flight data from the desktop client
Only while you have pressed Start in the client, it sends the following to mysimmap.net: your callsign, departure and arrival airport, the simulated aircraft's position, altitude, heading, ground speed and aircraft type, a timestamp, and your email address and API key for authentication. The client does not read anything else from your computer.
Payments
Supporter accounts are paid via Ko-fi. Ko-fi handles the payment; we only receive the email address and the fact that you have paid, so we can upgrade the matching account. We never see your card or bank details.
Technical data
Like any website, our servers and our network provider receive your IP address and basic request information (browser, time, page) when you visit. This is used only to deliver the site and to protect it against abuse, and is not combined with other data.
Cookies
- Login cookie – keeps you signed in after you have entered your login code.
- Security cookie – protects forms against cross-site request forgery.
Both are strictly necessary for the site to work, so we do not show a cookie banner. There are no tracking, analytics or advertising cookies.
Third-party services
To run the service we rely on a few external providers:
| Provider | Purpose |
|---|---|
| Cloudflare | Network and security layer in front of mysimmap.net. All traffic passes through Cloudflare. |
| hCaptcha | Protects the login form against bots. May process your IP address and browser data when the login form is shown. |
| UserCheck | Checks new email addresses to block disposable ones when an account is created. |
| Proton Mail | Sends the one-time login codes. |
| OpenFreeMap | Map tiles. Your browser downloads tiles directly from OpenFreeMap, which sees your IP address. |
| jsDelivr | Delivers the page's styling and map libraries. Your browser downloads them directly, so jsDelivr sees your IP address. |
| Ko-fi | Handles payments for supporter accounts. |
Some of these providers may process data outside the EU/EEA. Where that is the case, the transfer is covered by the provider's standard contractual clauses or the EU–US Data Privacy Framework.
How long we keep data
- Flights and positions – deleted automatically after one week.
- Your account – kept until you ask us to delete it.
- Server logs – kept for a short period for security and troubleshooting.
Legal basis
We process your data to provide the service you have signed up for (GDPR Art. 6(1)(b)), and to keep the service secure and free of abuse (legitimate interest, Art. 6(1)(f)).
Your rights
Under the GDPR you have the right to access, correct and delete your data, to restrict or object to processing, and to receive your data in a portable format. To use any of these rights – for example to delete your account and all flights – email [email protected].
If you believe we handle your data incorrectly, you can complain to the Danish Data Protection Agency, Datatilsynet.
Changes
If this policy changes, the updated version will be posted on this page with a new date.